$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1b56d794-06a2-4803-b98b-e9a84d35ff73.roa File: 1b56d794-06a2-4803-b98b-e9a84d35ff73.roa (raw, json) Hash identifier: a46KodSYciYRQkGyZnHbPnTofaCqsxvavWfKo+iHXUI= Subject key identifier: 4D:8F:1A:F6:98:A7:CF:9B:4C:06:D7:10:64:65:96:A4:C7:10:8E:07 Certificate issuer: /CN=A91F635F0000/serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Certificate serial: 012BBEE799864AEAEB50FB6FC35B62EC35CDA23A Authority key identifier: 40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1b56d794-06a2-4803-b98b-e9a84d35ff73.roa Signing time: Sat 19 Apr 2025 00:41:06 +0000 ROA not before: Sat 19 Apr 2025 00:41:06 +0000 ROA not after: Sat 24 May 2025 23:59:59 +0000 asID: 16509 IP address blocks: 2406:daff:8840::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/dc5cb86a-b72d-4eca-b351-c500ace28c65.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 00:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:2b:be:e7:99:86:4a:ea:eb:50:fb:6f:c3:5b:62:ec:35:cd:a2:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F635F0000, serialNumber=4076825524D2C66D2E10436FE65E93E8C1BD4A37 Validity Not Before: Apr 19 00:41:06 2025 GMT Not After : May 24 23:59:59 2025 GMT Subject: serialNumber=61b854823b9c85b70ccb492494569be4be10379d17732e257c9f8a507cc49eb6, CN=c0bf0fe8-717c-4f72-9b45-c9c519132a81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:40:a3:51:21:40:d1:88:1c:0f:26:c5:43:44: 14:43:45:ce:79:dd:e1:d8:52:df:c5:06:55:2d:31: 8d:3b:56:af:49:35:39:6d:99:05:12:12:c5:2a:b3: 5d:3a:21:67:9a:3a:79:2d:28:67:b5:19:f1:0a:b4: 62:19:85:52:49:30:62:b5:92:19:35:c9:18:1d:0a: 3a:a0:dc:d5:db:6c:f1:95:10:92:4d:fc:3b:29:04: 36:61:d2:80:84:b5:4b:b5:70:0e:42:a8:f9:c7:2b: 0a:42:08:98:b1:b0:ff:4a:72:3c:1b:7a:38:1e:1d: f8:8a:9c:8d:42:8d:df:42:f5:18:4e:64:b2:07:30: a7:5b:ea:c3:70:fa:3c:66:33:2d:1a:6f:0f:83:a9: 4e:ac:f6:36:46:01:f3:85:7a:05:4b:fa:ec:94:0b: 6c:ad:08:c4:71:08:54:b6:ff:6c:9b:94:d3:29:a3: 2b:a1:11:8a:33:02:4d:b7:d7:ca:b7:57:8c:cf:6b: 11:d1:0f:59:95:d1:54:5e:be:b0:77:29:52:73:f1: b2:93:24:83:c8:42:c8:45:b8:b5:fe:a6:d7:bf:a3: 55:c0:9c:cc:39:2a:de:63:01:51:8d:e8:fb:6d:d2: e2:5f:6e:b9:d9:25:bd:e3:79:95:c6:c8:0d:fa:cf: ae:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:8F:1A:F6:98:A7:CF:9B:4C:06:D7:10:64:65:96:A4:C7:10:8E:07 X509v3 Authority Key Identifier: keyid:40:76:82:55:24:D2:C6:6D:2E:10:43:6F:E6:5E:93:E8:C1:BD:4A:37 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QHaCVSTSxm0uEENv5l6T6MG9Sjc.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/1b56d794-06a2-4803-b98b-e9a84d35ff73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/08c2f264-23f9-49fb-9d43-f8b50bec9261/7ba17863-a613-4197-9ed5-beda6a89869f.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2406:daff:8840::/48 Signature Algorithm: sha256WithRSAEncryption 79:90:a7:e7:52:2b:cd:49:51:08:d3:75:be:24:40:fe:fb:38: ca:b2:3a:24:34:92:c6:e3:a2:1b:29:06:95:fd:d8:be:9c:8f: 56:98:ae:fc:fb:09:d4:f7:2a:5e:c1:0f:32:07:2e:11:bb:64: ab:ac:6b:83:d8:4d:44:eb:6f:bb:71:09:44:5a:d2:8b:75:75: fd:54:5b:1a:da:52:94:0c:d1:84:63:7f:e6:49:b2:fc:78:d9: a8:d6:53:2a:d7:d7:fd:31:a4:fa:78:86:fa:9b:f6:5b:50:26: 0a:b5:05:3e:75:6f:79:79:36:e0:ce:d7:a9:f4:14:55:25:cc: af:1a:ff:87:8a:e0:3a:42:93:6a:e3:0a:e4:72:4f:e9:6f:25: 26:50:98:b3:b9:c6:62:ac:7d:8f:23:d8:47:d7:39:58:96:cc: ac:1b:3d:8f:1e:84:25:de:76:19:ac:eb:05:92:58:37:96:29: 24:fe:81:6e:0f:16:d0:37:e2:7e:19:0c:1f:55:33:e8:e5:cb: dd:d2:8c:cb:ab:e0:8d:46:05:b6:69:e2:f3:0d:1d:d3:0e:1a: 76:4a:32:b4:77:44:ad:49:a2:6c:2a:d5:ff:0f:ce:6e:a8:99: 60:32:58:ea:3e:fc:71:87:34:3e:fd:95:0b:77:e1:10:22:4f: d4:02:df:20 -----BEGIN CERTIFICATE----- MIIFnzCCBIegAwIBAgIUASu+55mGSurrUPtvw1ti7DXNojowDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRjYzNUYwMDAwMTEwLwYDVQQFEyg0MDc2ODI1NTI0 RDJDNjZEMkUxMDQzNkZFNjVFOTNFOEMxQkQ0QTM3MB4XDTI1MDQxOTAwNDEwNloX DTI1MDUyNDIzNTk1OVowejFJMEcGA1UEBRNANjFiODU0ODIzYjljODViNzBjY2I0 OTI0OTQ1NjliZTRiZTEwMzc5ZDE3NzMyZTI1N2M5ZjhhNTA3Y2M0OWViNjEtMCsG A1UEAxMkYzBiZjBmZTgtNzE3Yy00ZjcyLTliNDUtYzljNTE5MTMyYTgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkCjUSFA0YgcDybFQ0QUQ0XOed3h 2FLfxQZVLTGNO1avSTU5bZkFEhLFKrNdOiFnmjp5LShntRnxCrRiGYVSSTBitZIZ NckYHQo6oNzV22zxlRCSTfw7KQQ2YdKAhLVLtXAOQqj5xysKQgiYsbD/SnI8G3o4 Hh34ipyNQo3fQvUYTmSyBzCnW+rDcPo8ZjMtGm8Pg6lOrPY2RgHzhXoFS/rslAts rQjEcQhUtv9sm5TTKaMroRGKMwJNt9fKt1eMz2sR0Q9ZldFUXr6wdylSc/GykySD yELIRbi1/qbXv6NVwJzMOSreYwFRjej7bdLiX2652SW943mVxsgN+s+ugQIDAQAB o4ICSzCCAkcwHQYDVR0OBBYEFE2PGvaYp8+bTAbXEGRllqTHEI4HMB8GA1UdIwQY MBaAFEB2glUk0sZtLhBDb+Zek+jBvUo3MA4GA1UdDwEB/wQEAwIHgDB+BggrBgEF BQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVw b3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9RSGFDVlNU U3htMHVFRU52NWw2VDZNRzlTamMuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYI KwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9uYXdz LmNvbS92b2x1bWUvMDhjMmYyNjQtMjNmOS00OWZiLTlkNDMtZjhiNTBiZWM5MjYx LzFiNTZkNzk0LTA2YTItNDgwMy1iOThiLWU5YTg0ZDM1ZmY3My5yb2EwgZUGA1Ud HwSBjTCBijCBh6CBhKCBgYZ/cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8wOGMyZjI2NC0yM2Y5LTQ5ZmItOWQ0My1mOGI1 MGJlYzkyNjEvN2JhMTc4NjMtYTYxMy00MTk3LTllZDUtYmVkYTZhODk4NjlmLmNy bDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAP BAIAAjAJAwcAJAba/4hAMA0GCSqGSIb3DQEBCwUAA4IBAQB5kKfnUivNSVEI03W+ JED++zjKsjokNJLG46IbKQaV/di+nI9WmK78+wnU9ypewQ8yBy4Ru2SrrGuD2E1E 62+7cQlEWtKLdXX9VFsa2lKUDNGEY3/mSbL8eNmo1lMq19f9MaT6eIb6m/ZbUCYK tQU+dW95eTbgztep9BRVJcyvGv+HiuA6QpNq4wrkck/pbyUmUJizucZirH2PI9hH 1zlYlsysGz2PHoQl3nYZrOsFklg3likk/oFuDxbQN+J+GQwfVTPo5cvd0ozLq+CN RgW2aeLzDR3TDhp2SjK0d0StSaJsKtX/D85uqJlgMljqPvxxhzQ+/ZULd+EQIk/U At8g -----END CERTIFICATE-----Generated at Sat Apr 26 07:31:57 2025 by rpki-client